Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bERf0nwdbaT-qtTUyjCPZk2bDco.roa
File: bERf0nwdbaT-qtTUyjCPZk2bDco.roa (raw, json)
Hash identifier: iqIDonG273Dzj6DyCnK5bFjXNAUF0KHGxApaXl8HUjg=
Subject key identifier: 6C:44:5F:D2:7C:1D:6D:A4:FE:AA:D4:D4:CA:30:8F:66:4D:9B:0D:CA
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A013C762505D2864F6A57B167D4CAC8E1B
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bERf0nwdbaT-qtTUyjCPZk2bDco.roa
Signing time: Tue 18 Aug 2026 07:30:28 +0000
ROA not before: Tue 18 Aug 2026 07:30:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 82.152.216.0/24 maxlen: 24
82.152.217.0/24 maxlen: 24
82.153.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:c7:62:50:5d:28:64:f6:a5:7b:16:7d:4c:ac:8e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 18 07:30:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c445fd27c1d6da4feaad4d4ca308f664d9b0dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:5f:72:82:06:90:41:59:bf:92:2a:fb:23:
11:e3:31:a0:91:64:e8:01:ac:b0:b1:b8:91:0f:08:
c7:92:82:28:c0:a6:ad:46:a3:6b:b9:62:7d:39:d7:
3d:4a:5e:7d:96:b1:4f:2b:19:b1:39:5a:53:a1:8a:
3d:ad:76:8f:71:e1:a0:47:25:35:dc:da:8d:1b:27:
88:da:a2:dc:7b:f2:20:d6:a0:02:49:55:af:0d:b4:
35:71:f4:36:6f:04:a5:1d:d1:e1:b5:76:7f:c6:38:
63:40:f6:85:b6:d6:ec:2a:82:19:66:13:70:4d:d7:
6a:8b:60:fd:bc:ae:b0:03:78:d1:76:60:ea:f9:2d:
77:74:b6:2e:eb:08:67:59:df:89:0c:56:50:5b:75:
f7:ca:3d:f4:24:53:b9:68:7b:04:56:54:8e:23:f7:
95:fe:24:30:69:6f:70:59:a6:f7:7e:6c:a8:d8:05:
1b:2b:5a:7d:d2:e1:80:fb:1e:95:b6:1b:57:1e:46:
cc:a7:74:3b:2b:ce:ba:9b:61:6e:3c:df:15:ef:74:
bb:ed:1a:e3:a3:52:59:95:27:08:04:09:61:68:e9:
93:b9:18:83:72:f4:01:1a:66:b2:2e:47:6e:b8:7c:
52:f5:a5:00:32:06:8d:45:94:6a:55:0a:71:e2:53:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:44:5F:D2:7C:1D:6D:A4:FE:AA:D4:D4:CA:30:8F:66:4D:9B:0D:CA
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bERf0nwdbaT-qtTUyjCPZk2bDco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.216.0/23
82.153.184.0/24
Signature Algorithm: sha256WithRSAEncryption
51:88:fb:3f:69:a0:78:99:ba:80:63:19:47:9d:2b:fa:49:a5:
fe:d4:2b:d7:5f:85:7b:a6:67:38:35:ee:78:00:a4:3a:17:48:
4a:ae:12:36:78:9d:da:3b:ea:b7:c1:19:d9:9b:f6:80:9b:04:
14:29:07:6e:66:13:a4:2e:68:43:e5:34:f5:2c:f1:16:5d:62:
f7:f0:b7:59:b5:71:c5:32:c2:88:61:93:2e:e4:d5:10:f6:ae:
6a:f3:67:03:f7:02:3c:5f:95:32:03:d6:45:65:38:05:65:5e:
2e:73:df:af:00:b5:36:a5:e7:1c:18:ed:f2:8e:8c:15:b0:95:
5c:66:98:ae:fa:38:2f:bd:73:b9:85:34:b2:2b:02:a1:18:de:
a0:11:92:0a:f2:76:7d:9b:1c:38:51:24:18:6f:d1:6a:b2:9e:
80:ef:78:63:31:6f:ff:50:45:5b:ec:eb:8b:a5:d4:42:c3:2f:
fc:7e:d0:ee:a8:c9:11:07:3f:66:35:7d:68:49:64:28:58:ab:
0d:d8:8b:fe:62:b3:fb:9f:c7:43:40:1b:e9:68:69:c6:ba:41:
c6:71:a2:47:3f:ee:d6:32:97:92:5f:7b:c9:5f:1e:f6:7f:b4:
97:f7:1f:12:39:b1:89:98:dd:09:58:38:99:20:85:37:1d:6c:
1f:71:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:25 2026 by rpki-client